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DEVICE FOR PROGRAMMING A CONTROLLER 

Description 

The present invention relates to a device for programming a controller and to a 
corresponding method in which the device is used. 



5 Background Information 

Accompanying technological development, motor vehicles are being increasingly 
equipped with programmable controllers. Suitable software must be stored in a 
controller of this type to enable the function of the controller. This software may be 
installed for the first time after the controller has been installed in a vehicle, for 

10 example. However, it may also be desirable to update the software of the controller 
at a later time, for example, after a malfunction, or to upgrade it to enable the 
controller to execute different or new functions or to better execute old functions. For 
this purpose, it was previously necessary for an automobile technician to personally 
take expensive gear to the vehicle or for the vehicle to be taken to an appropriate 

1 5 shop over a great distance. 



Advantages of the Invention 

To avoid this, the device according to the present invention for programming a 
controller is designed as a portable copy-protected plug-in memory unit for storing 
20 software. This software is used for programming the controller. 



In the computer industry, memory sticks are known storage media. These may be 
plugged into a PC interface (for example, USB) and data may be transferred to them. 
Such memory sticks make simple data transport without networks or the like 
25 possible. 



Furthermore, copy-protected plug-in devices, known as crypto-dongles, are known, 
which are also insertable into PC interfaces. They are equipped with cryptographic 
processors and specially protected memory areas. Crypto-dongles may encrypt 
30 data, store data using key protection, and perform authentication procedures. A 
program stored on a computer may, for example, only be run if an appropriate 
crypto-dongle is inserted into a hardware device of the computer. Cryptographic 
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algorithms. for encrypting and decrypting data, as well as methods for authentication 
are used in this case. 

The present invention implements a combination of the "memory stick" storage 
5 medium and the crypto-dongle for reprogramming a controller installed in a vehicle. 

The device according to the present invention for programming a controller is 
designed as a portable copy-protected plug-in memory unit for storing software. 
Special controller software may be temporarily stored for transportation purposes on 

10 the copy-protected plug-in memory unit, for example. In addition, the copy-protected 
plug-in memory unit according to the present invention preferably has at least one 
interface, which is designed for receiving software from a hardware device or for 
transferring software, such as controller software, to a controller. The copy-protected 
plug-in memory unit preferably has the following components: an interface, 

15 manipulation-protected hardware, a cryptographic unit, at least one processor which 
has a logic and an interface driver, and a memory preferably containing encrypted 
software, which includes controller software, programming software, and encryption. 

In the preferred embodiment of the present invention, the copy-protected plug-in 
20 memory unit is designed for programming a controller of a motor vehicle. 

The design of the copy-protected plug-in memory unit, in particular of its 
components, advantageously offers the option of transporting controller software in 
an encrypted form. Controller software is thus protected against unauthorized access 

25 by third parties. The necessary programming software and/or encryption may be 
delivered in the memory of the copy-protected plug-in memory unit. The 
programming software and in particular the encryption is designed such that the 
controller software on the copy-protected plug-in memory unit is protected. Access to 
the memory of the copy-protected plug-in memory unit, in particular reading or 

30 writing of the controller software, may only take place via suitable hardware devices 
or controllers equipped with appropriate software. 

The method according to the present invention for programming a controller by 
transferring software via a copy-protected plug-in memory unit may include various 
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steps. According to the present invention, transfer of software, controller software for 
example, stored on the copy-protected plug-in memory unit to a controller is 
provided. Furthermore, the software, in particular controller software, may be 
transferred from a hardware device to a copy-protected plug-in memory unit. Due to 
5 its compact dimensions, the copy-protected plug-in memory unit is easily 
transportable. 

The software may be loaded to a PC having an internet connection, to a loading 
station in the vehicle accessories store, in a repair shop, or in the factory. 

10 

Use of the copy-protected plug-in memory unit as intended according to the present 
invention for reprogramming controllers offers the advantageous possibility of 
distributing and selling controller software in this form, i.e., via a copy-protected plug- 
in memory unit. Controllers may be easily reprogrammed by the owner of a controller 
15 him/herself using the copy-protected plug-in memory unit. 

The present invention also creates new forms of selling controller software in which it 
is ensured that the software is only transported in an encrypted form. 

20 It is also no longer necessary to consult a technician or to transport the vehicle in 
which the controller is installed over a large distance at a high cost to an appropriate 
repair shop. Using the method according to the present invention, a completely 
novel, particularly secure form of software sale is provided irrespective of the specific 
use of the controller software. 

25 

The computer program according to the present invention is used for carrying out the 
described method. The program code means provided for carrying out the method 
are stored according to the present invention on a computer-readable data medium. 

30 Further advantages and embodiments of the present invention result from the 
description and the appended drawing. 
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It is understood that the above-named features to be elucidated below are usable not 
only in the given combination, but also in other combinations or by themselves 
without leaving the scope of the present invention. 

5 The present invention is schematically illustrated in the drawing on the basis of an 
exemplary embodiment and is described in greater detail below with reference to the 
drawing. 

Drawing 

10 The present invention is elucidated in detail with reference to the appended drawing. 

Fig. 1 shows a preferred embodiment of the method according to the present 

invention. 

1 5 Fig. 2 shows a preferred embodiment of the device according to the present 

invention. 

Possible applications of a copy-protected plug-in memory unit 100 are shown in 
Figure 1 as examples to illustrate the method according to the present invention. 
20 Copy-protected plug-in memory unit 100 has an interface 101 , which is designed for 
providing a plug-in contact between copy-protected plug-in memory unit 100 and a 
hardware device 12 or a controller 51 . 

The figure shows a preferred embodiment for executing the method according to the 
25 present invention. Individual steps are shown schematically from left to right together 
with the respective devices. Using the method according to the present invention, 
software 11 is to be programmed in its entirety on controller 51 of a motor vehicle 5. 
A function of controller 51 may thus be made available or updated. The required 
software 1 1 is provided by the manufacturer of the software and/or controller 51 on 
30 the internet, an intranet, or a software medium in general, such as a diskette or CD- 
ROM or DVD. 

In a first step 1 software 1 1 is loaded onto a hardware device 12. Such loading may 
take place on a PC having an internet connection, on a loading station in the vehicle 
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accessories store or a repair shop or at the factory itself. Hardware device 12 has a 
hardware interface to which copy-protected plug-in memory unit 100 may be docked 
via its interface 101. The new software 1 1 for controller 51 and the necessary 
sequence control of the programming is then loaded to copy-protected plug-in 
5 memory unit 100 (step 2). 

Copy-protected plug-in memory unit 100 may then be transported to vehicle 5 (step 
3), which has controller 51 to be programmed. Copy-protected plug-in memory unit 
100 may be brought to an automobile repair shop where vehicle 5 is left for servicing 
10 or inspection. 

However, copy-protected plug-in memory unit 100 may also be sent by mail. 
Alternatively, the owner of vehicle 5 picks up copy-protected plug-in memory unit 100 
at the dealer and programs controller 51 himself. The method according to the 
15 present invention may also run within an automobile manufacturing process in an 

automobile plant. At an appropriate point in the automobile manufacturing process, a 
controller 51 may be programmed with software 1 1 using copy-protected plug-in 
memory unit 100. 

20 In an important step 4 of the method according to the present invention, controller 51 
is programmed. In doing this, copy-protected plug-in memory unit 100 is plugged into 
an appropriate port of vehicle 5 or controller 51 via its interface 101. 

After successful programming, the programming software and the controller software 
25 may be deleted from copy-protected plug-in memory unit 100, or copy-protected 
plug-in memory unit 100 increments a running programming counter. Because 
software 1 1 on copy-protected plug-in memory unit 100 is encrypted, it may only be 
read by controller 51 . 

30 Software 1 1 may be transferred in a simple and secure manner using copy-protected 
plug-in memory unit 100 according to the present invention. Due to the fact that 
copy-protected plug-in memory unit 100 has a very compact design, little logistic 
complexity is required for transferring software 11 from an automobile manufacturer 
to vehicle 5. 
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A preferred embodiment of copy-protected plug-in memory unit 100 is illustrated in 
Figure 2. 

Copy-protected plug-in memory unit 100 has interface 101 and manipulation- 
5 protected hardware 102. A memory 104 is provided as the core of unit 100 for 
storing software 111. 

To protect software 1 1 1 , a cryptographic unit 108 is situated directly upstream from 
interface 101 through which the software is transferred. The cryptographic unit has a 

10 processor 103, including logic and interface drivers. This cryptographic unit 108 

provides further protection for software 111, which is stored on copy-protected plug- 
in memory unit 100. Software 111 may be accessed, i.e., reading or writing the 
software via cryptographic unit 108 is enabled, only when suitable devices such as a 
hardware device 12 or a controller 51 are used. These are equipped with suitable 

15 software and a suitable mating interface for docking interface 101 according to the 
present invention of copy-protected plug-in memory unit 100. 

Encrypted software 1 1 1 stored in memory 104 may have a controller software 105, 
programming software 106, and a key 107. Due to the design of copy-protected 
20 plug-in memory unit 100, software 111 stored thereon is protected against 

environmental influences and in particular against unauthorized access. Due to the 
compact design of copy-protected plug-in memory unit 100, software 111 may be 
transported in a secure and simple manner via copy-protected plug-in memory unit 
100. 

25 

Copy-protected plug-in memory unit 100 and in particular cryptographic unit 108 
have a manipulation-protected design (overvoltage and undervoltage sensors, 
additional protective layers, chaotic layout, and the like) to make access to their 
contents difficult. Software 111 and controller software 105 are stored encrypted in 
30 copy-protected plug-in memory unit 100. Cryptographic unit 108, which checks all 
accesses for protection and is responsible for authentication, encryption, decryption, 
manipulation recognition, and key management is used to protect the stored 
software. 
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When software 1 1 1 is loaded or transferred, cryptographic unit 108 becomes active 
and starts executing programming software 106. Programming software 106 tests 
whether controller software 105 matches controller 51 installed in vehicle 5. In doing 
so, the authentication of vehicle 5 is checked, then controller 51 is programmed, i.e., 
5 controller software 105 is stored on controller 51 . 



